Is WA Bulk Sender safe?
WA Bulk Sender injects a WhatsApp Web bridge that runs send, group and contact commands from any page message.
The extension injects scripts into web.whatsapp.com that let it send bulk messages, join or leave groups, and list contacts, groups and labels. The injected bridge accepts window.postMessage commands without checking the sender's origin, so other scripts able to post to the WhatsApp Web window could trigger these actions. Replies are posted back to the same window without a target origin.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itExport Scraper - 6 other listings from the same operator, none carrying a finding
Export Scraper - 6 other listings from the same operator, none carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
6 other listings published from this account, 78k+ users between them, none of them carrying a finding.
Shared hosts - 1 hostname
Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.